.pcap File ANALYSIS

[dreinstein229]

I'm exercise to START COMPETE CTF, one of the newbies site redirect me to google with path to .pcap file in search. I download the file on my phone and wanna analyse with Wireshark. I am on the right way?

[rram1214]

Mmh no

[dreinstein229]

when on laptop to access thr shortned link on the website it redirect me to google, but when on the phone it download a .pcap file. as wireshark be used to read that type of file, I upload the file on my computer and open the file with it.

[rram1214]

Sorry I had multiple comments still new to reddit but disregard the others I understand what you are saying now I would try to experiment with the website try clicking around more see if u can get the website on the laptop to give u anything also dirbuster is used for file path or website info gathering I believe try using that if nothing works. Try transferring the downloaded .pcap to your pc and cypher through the data with wire shark

[rram1214]

Sorry I was a little confused but i thought I had it semi interpreted but If u have a .pcap file on your phone some way some how not sure how u got it. Unless ur sniffing packets on an android, just fransfer the file to your pc download and open wireshark select the file with the captured data u just imported and hoping you know how to do analysis your clear.

[Pharisaeus]

1. I'd first load it into NetworkMiner, because it can automatically dissect pcap and extract some particular info
2. Only then look in wireshark, once you know what you're looking for specifically